Cyber Threats & Incidents

Data security and data protection are not synonyms, but two important tasks for companies. Learn how to clearly distinguish between both areas and implement them efficiently.

Hybrid attacks, political tensions, and sabotage demonstrate: Germany is in the midst of a permanent cyber conflict – and SMEs are part of the attack surface. Companies that are not resilient could inadvertently become entangled in geopolitical conflicts.

A cyberattack can cripple a business for the long term, affecting corporations and SMEs alike. Cyber resilience helps to limit damage and ensure business continuity. Learn how to build greater cyber resilience for your company.

Have you ever been a victim of identity theft? In the digital age, it happens faster than ever before. With inadequately protected data, it is easy for hackers to collect information and use it for malicious purposes.

Even before the GDPR, there were mandatory reporting and notification requirements for data breaches, both to data protection authorities and to the affected individuals. Neglecting these reporting obligations in the event of a data incident was already subject to fines. However, the GDPR, which has been in effect since May 25, 2018, imposes stricter requirements in this area, and the scope for fines has been increased drastically. Companies must pay closer attention to their protocols and procedures for reporting such breaches. Proactive action is required from businesses to meet these heightened demands in their day-to-day operations.

When personal telecommunications data is stored by public authorities—or on their behalf—without a specific cause, this is referred to as data retention. As a precursor to telecommunications surveillance, data retention is one of the most controversial areas of data protection law. Corresponding legal provisions have been struck down multiple times by both the Federal Constitutional Court and the European Court of Justice.

For companies, knowledge is capital. These trade secrets have significant economic value and must not fall into the hands of unauthorized third parties. It is not just large corporations but also startups that possess sensitive trade secrets worthy of protection, which are subject to confidentiality requirements and can secure a competitive advantage. With the entry into force of the Trade Secret Act (GeschGehG), every company must demonstrate that it protects its know-how through measures that are both externally recognizable and appropriate.

Data misuse occurs when personal data such as names, contact details, or account information is used against a person's will to commit potentially criminal acts. To protect personal and thus sensitive data from such misuse, there are, among other things, data protection laws and the General Data Protection Regulation (GDPR). This form of data misuse can take many different forms in practice and sometimes has serious consequences: from identity theft to corporate bankruptcy.

In an increasingly digitized world, passwords serve as the first line of defense for our personal data. But how secure are these traditional passwords really? Given the constant evolution of technology and the growing threat of cybercrime, it is essential to evaluate and understand various authentication methods.

The General Data Protection Regulation stipulates that individuals affected by data protection violations may have a right to damages. The European Court of Justice recently issued relevant rulings on this.

Data protection and schools go hand in hand. School operations involve the processing of a significant amount of personal data. This article outlines the applicable laws and regulations.

The GDPR sets high standards for passwords. Password managers make it easy to keep track of numerous, complex passwords. Which password managers are recommended for businesses?

In today's digital era, external cyberattacks on companies are no longer unusual and are a well-known risk. Yet, despite all the justified fear of external threats, an increasingly underestimated risk is coming into focus: data theft from within the organization.

For many privacy advocates, Meta is a red flag. It seems the Facebook parent company would rather pay fines than provide adequate protection for user data. In July 2023, Meta launched a new app: its latest venture is the Twitter clone "Threads." Potential users in Europe are still waiting for the app, though that is not (entirely) due to data protection concerns.

To conclude a rental agreement, it is necessary to collect personal data. There are several important points for both tenants and landlords to consider. We have outlined the key rights and obligations regarding data protection.

Every company collects data that is subject to GDPR regulations. We explain when a personal data breach occurs and the obligations that arise from such an incident. Furthermore, we show you how to minimize potential legal consequences.

Artificial intelligence and machine learning allow us to age, look younger, or appear in videos we never knew existed. This is all known as deepfaking. But what does this mean for data protection?

Due to the COVID-19 pandemic, the video conferencing tool Zoom gained more than 150 million new users almost overnight. Internet trolls looking to exploit the situation were quick to act, leading to the rise of what is known as "Zoombombing."

Since the GDPR came into effect, there has been widespread uncertainty regarding data protection. Some individuals are exploiting this to engage in scams and fraud under the guise of GDPR compliance. However, with a little background knowledge, it is not difficult to spot fraudulent data protection schemes.